------------[ cut here ]------------ can-isotp: tx timer state 00000000 cfecho 00000000 WARNING: CPU: 0 PID: 3044 at net/can/isotp.c:920 isotp_tx_timer_handler+0xc4/0x14c net/can/isotp.c:920 Modules linked in: CPU: 0 PID: 3044 Comm: syz-executor.0 Not tainted 6.2.0-rc2-syzkaller-00057-g41c03ba9beea #0 Hardware name: linux,dummy-virt (DT) pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : isotp_tx_timer_handler+0xc4/0x14c net/can/isotp.c:920 lr : isotp_tx_timer_handler+0xc4/0x14c net/can/isotp.c:920 sp : ffff800008003eb0 x29: ffff800008003eb0 x28: ffff00007fbbb440 x27: ffff00007fbbb480 x26: ffff80000970aa84 x25: 0000000000000001 x24: 0000000000000000 x23: 0000000000000000 x22: 00000825057d7380 x21: ffff00007fbbb340 x20: f2ff000025400000 x19: 0000000000000000 x18: 00000000fffffffe x17: ffff800075859000 x16: ffff800008004000 x15: 0000000000000020 x14: ffff80000a3aeb08 x13: 0000000000002190 x12: 0000000000000b30 x11: 3030303030303030 x10: ffff80000a45eb08 x9 : 00000000ffffe000 x8 : ffff80000a3aeb08 x7 : ffff80000a45eb08 x6 : 0000000000000000 x5 : ffff00007fbb8a88 x4 : 0000000000000000 x3 : ffff800075859000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : faff0000034a0000 Call trace: isotp_tx_timer_handler+0xc4/0x14c net/can/isotp.c:920 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x140/0x1dc kernel/time/hrtimer.c:1749 hrtimer_run_softirq+0x6c/0xd0 kernel/time/hrtimer.c:1766 _stext+0x124/0x2a4 ____do_softirq+0x10/0x20 arch/arm64/kernel/irq.c:80 call_on_irq_stack+0x2c/0x5c arch/arm64/kernel/entry.S:892 do_softirq_own_stack+0x1c/0x30 arch/arm64/kernel/irq.c:85 invoke_softirq kernel/softirq.c:452 [inline] __irq_exit_rcu+0xcc/0xf4 kernel/softirq.c:650 irq_exit_rcu+0x10/0x20 kernel/softirq.c:662 __el1_irq arch/arm64/kernel/entry-common.c:472 [inline] el1_interrupt+0x38/0x6c arch/arm64/kernel/entry-common.c:486 el1h_64_irq_handler+0x18/0x2c arch/arm64/kernel/entry-common.c:491 el1h_64_irq+0x64/0x68 arch/arm64/kernel/entry.S:580 arch_local_irq_enable arch/arm64/include/asm/irqflags.h:35 [inline] raw_spin_rq_unlock_irq kernel/sched/sched.h:1370 [inline] finish_lock_switch kernel/sched/core.c:5003 [inline] finish_task_switch.isra.0+0x7c/0x270 kernel/sched/core.c:5121 context_switch kernel/sched/core.c:5247 [inline] __schedule+0x2b0/0x7d4 kernel/sched/core.c:6555 schedule+0x5c/0xcc kernel/sched/core.c:6631 do_nanosleep.constprop.0+0x5c/0x160 kernel/time/hrtimer.c:2044 hrtimer_nanosleep+0x9c/0x11c kernel/time/hrtimer.c:2097 common_nsleep+0x44/0x70 kernel/time/posix-timers.c:1236 __do_sys_clock_nanosleep kernel/time/posix-timers.c:1276 [inline] __se_sys_clock_nanosleep kernel/time/posix-timers.c:1254 [inline] __arm64_sys_clock_nanosleep+0xbc/0x134 kernel/time/posix-timers.c:1254 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x48/0x114 arch/arm64/kernel/syscall.c:52 el0_svc_common.constprop.0+0x44/0xec arch/arm64/kernel/syscall.c:142 do_el0_svc+0x38/0xc0 arch/arm64/kernel/syscall.c:197 el0_svc+0x2c/0xb0 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0xb8/0xc0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:584 ---[ end trace 0000000000000000 ]---